Following a cybersecurity issue that CafePress attempted to cover up, the Federal Trade Commission (FTC) stated that it had finalized an order against CafePress requiring it to strengthen its security posture.
About four months after a settlement over CafePress’s poor cybersecurity processes, which caused sensitive personal information to be exposed in a data breach, the FTC order was finally implemented.
The breach that came to light in 2019 had reportedly affected 23 million accounts. Even after continuous efforts to get the enterprise to take proper action, CafePress failed to secure its systems, and also decided not to inform affected customers about this and other cybersecurity issues.
Read More: https://www.securityweek.com/ftc-takes-action-against-cafepress-over-massive-data-breach-cover